Software development apparatus for model that requires security

Abstract

A software development apparatus for developing application software based on an object model that requires security in a web service application is provided. The software development apparatus includes a display unit that displays, in a class diagram of the application software, security annotation for adding security requirements for a service, input means for inputting the security annotation, transforming means for transforming the class diagram into a configuration model based on a markup language, and configuration-file creating means for creating a configuration file based on a markup language by serializing the configuration model based on a markup language. The security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server.

1. A software development apparatus for developing application software based on an object model that requires security in a web service application, the apparatus comprising:
 a display unit that displays, in a class diagram of said application software, a security annotation for adding security requirements for a service; 
 input means for inputting an input with said security annotation; 
 transforming means for transforming said class diagram into a configuration model based on a markup language, said class diagram being described in a UML, and said security requirements being described using an extension of the UML; and 
 configuration-file creating means for creating a configuration file based on said markup language by serializing said configuration model based on said markup language. 
 
     
     
       2. The software development apparatus according to  claim 1 , said security annotation specifying said security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server. 
     
     
       3. The software development apparatus according to  claim 2 , said security requirements comprising at least one of integrity, confidentiality, and authentication. 
     
     
       4. The software development apparatus according to  claim 2 , said transforming being performed for each of said security requirements. 
     
     
       5. The software development apparatus according to  claim 1 , said markup language being XML. 
     
     
       6. A computer program product comprising a non-transitory computer-readable medium storing a program that is executable by a computer to perform a method of developing application software based on an object model that requires security in a web service application, said method comprising:
 displaying, in a class diagram of the application software, a security annotation for adding security requirements for a service; 
 receiving said security annotation; 
 transforming said class diagram into a configuration model based on a markup language, said class diagram being described in a UML, and said security requirements being described using an extension of the UML; and 
 creating a configuration file based on said markup language by serializing said configuration model based on said markup language. 
 
     
     
       7. The computer program product according to  claim 6 , said security annotation comprising said security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server. 
     
     
       8. The computer program product according to  claim 7 , said security requirements comprising at least one of integrity, confidentiality, and authentication. 
     
     
       9. The computer program product according to  claim 6 , said transforming being performed for each of said security requirements. 
     
     
       10. The computer program product according to  claim 6 , said markup language being XML. 
     
     
       11. A software development method for developing application software based on an object model that requires security in a web service application, said method comprising:
 displaying, in a class diagram of said application software on a display unit of a computer, security annotation for adding security requirements for a service; 
 receiving, through an input of said computer, the security annotation; 
 transforming, by said computer, said class diagram into a configuration model based on a markup language, said class diagram being described in a UML, and said security requirements being described using an extension of the UML; and 
 creating, by said computer, a configuration file based on said markup language by serializing said configuration model based on said markup language. 
 
     
     
       12. The method according to  claim 11 , said security annotation comprising said security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server. 
     
     
       13. The method according to  claim 12 , said security requirements comprising at least one of integrity, confidentiality, and authentication. 
     
     
       14. The method according to  claim 11 , said transforming being performed for each of said security requirements. 
     
     
       15. The method according to  claim 11 , said markup language being XML.